![]() ![]() ![]() Just to make sure we are on the same page everything above is happening inside of my VM while I attempt to read my ammo from my main machine. That being said I am still slightly confused by what 0x0A3C5FB8 means but my best guess is that its a pointer? Does 0x590844 just hold a pointer to 0x0A3C5FB8 which holds a pointer to 0x007FD8A0 which is actually where my ammo is stored? I only assume this because in the pictures above it uses -> which I just assumed to mean pointer. Now after some testing I figured out that 0x007FD8A0 which is located at the very top of both pictures is the actual memory location where my guns ammo is stored and that = 13 means I have 13 bullets left. Next I added 0x590844 as a new pointer address and it did in fact contain the same pointer as "ac_client + 0x00190844" (the pointer to my current ammo count). The real address looked like the following where ac_client is equal to 0x400000. ![]() At this point I was confident in knowing where my ammo was stored. After I found it I closed my game multiple more times to ensure it always pointed to my ammos integer value (which would change each time I reopened my game) which it did. I then used pointer scanner along with closing and reopening my game to narrow down the real persistent memory location of where a pointer to my guns ammo was. I first shot my gun then found where it was being stored in memory. I first loaded up AssaultCube along with Cheat Engine inside of VmWare Workstation. I am working on learning how to read memory from other processes that are located inside of a VM. ![]()
0 Comments
Leave a Reply. |